Architecte Sécurité – IAM & Identités Machines H/F - IBM France

International Business Machines Corporation; Bois-Colombes; On-site; EUR 90,000 - 130,000; Full time

Job summary

International Business Machines Corporation in Île-de-France, Bois-Colombes is seeking a Security Architect focused on IAM and Machine Identities. You will design and implement secure IAM architectures spanning human and non-human identities, aligning with GDPR, PCI DSS, and ISO 27001.

Responsibilities include leading IAM design for IGA, SSO, MFA, PAM and CIAM, securing machine-to-machine communications, and integrating AI-driven identity analytics and ITDR to support innovation and risk

Responsibilities

• Design and deploy secure network and system architectures.
• Ensure the security of hybrid environments (cloud and on-premises).
• Define and evolve the IAM architecture, including Identity Governance and Administration (IGA), Access Management (SSO, MFA, federation), Privileged Access Management (PAM), and Customer Identity and Access Management (CIAM).
• Secure machine-to-machine communications, including workload identities, service accounts, secrets and certificate management, OAuth2/OIDC authentication, mTLS, and PKI.
• Integrate AI into IAM processes through behavioral analytics, identity threat detection and response (ITDR), access recommendations, role mining, and automated access reviews.

Job description

Security Architect - IAM & Machine Identities

The Security Architect designs and implements the organization's security infrastructure, with a particular focus on Identity and Access Management (IAM). The role ensures that both human and non-human identities (applications, workloads, APIs, AI agents) are properly governed and protected, while supporting innovation and digital transformation initiatives.

Key Responsibilities

• Design and deploy secure network and system architectures.
• Ensure the security of hybrid environments (cloud and on-premises).
• Define and evolve the IAM architecture, including Identity Governance and Administration (IGA), Access Management (SSO, MFA, federation), Privileged Access Management (PAM), and Customer Identity and Access Management (CIAM).
• Secure machine-to-machine communications, including workload identities, service accounts, secrets and certificate management, OAuth2/OIDC authentication, mTLS, and PKI.
• Integrate AI into IAM processes through behavioral analytics, identity threat detection and response (ITDR), access recommendations, role mining, and automated access reviews.
• Define and govern the identity and permissions model for AI agents, including authentication, delegation, least-privilege principles, and auditability of actions.
• Recommend innovative security solutions to address business and technology requirements.
• Collaborate with IT and DevOps teams to embed security by design across projects and platforms.
• Ensure security architectures comply with applicable regulations and standards, including GDPR, PCI DSS, and ISO 27001.